Kame Racoon vulnerabilities

5 known vulnerabilities affecting kame/racoon.

Total CVEs

5

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2005-0398MEDIUMCVSS 5.0v2003-07-11v2004-04-05+12 more2005-03-14

CVE-2005-0398 [MEDIUM] CVE-2005-0398: The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of servic The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

CVE-2004-0607CRITICALCVSS 10.0v2003-07-11v2004-04-05+2 more2004-12-06

CVE-2004-0607 [CRITICAL] CVE-2004-0607: The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

CVE-2004-0392MEDIUMCVSS 5.0≤ 2004-04-07a2004-06-14

CVE-2004-0392 [MEDIUM] CVE-2004-0392: racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and drop racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

CVE-2004-0403MEDIUMCVSS 5.0≤ 2004-04-08a2004-06-01

CVE-2004-0403 [MEDIUM] CVE-2004-0403: Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) vi Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.

CVE-2004-0164MEDIUMCVSS 5.0PoCvall_versions2004-03-03

CVE-2004-0164 [MEDIUM] CVE-2004-0164: KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to dele KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.